Re: newbie security question

From: Chris (xterm_at_xmail.com)
Date: 06/25/04


Date: Thu, 24 Jun 2004 23:01:39 GMT

Gerard Wassink wrote:
> On Thu, 24 Jun 2004 16:06:31 -0400, h2server scribbled:
>
>
>>I just intalled RH9 and I went to an internet site that scans my computer
>>for opened port. it found TCP 22 and TCP 6000 opened and it tells me that
>>these ports are used by some nasty trojans.
>>Are these ports used by someother program in linux? Can I close them and
>>how?
>>thanks
>>h
>
>
> OK, you present yourself as newbie. That's ok.
>
> What I always do when I want to know what a port is used for, I google for
> "port 6000" (for example). And in this case the fourth entry shows me that
> port 6000 is used by X-windows to listen to connecting clients.
>
> Port 22 is the classic port for the secure shell, for users (and / or
> yourself) to be able to connect to your machine in a text shell
> environment.
>
> And yes, you can close them.
>
> There's a deamon with the name of sshd that services ssh calls. When you
> don't need incoming shell connections, just make sure it never starts.
> Finding out where it is started is a good exercise for newbies, it teaches
> you how things work ;>)
>
> You might start with:
> man sshd
> man xinetd -or- man inetd
>
>
> I don't know as much about X windows and how it makes its ports available,
> you'll have to dive into that yourself a bit, but hey, that's the fun of
> Linux, isn't it? ;>)
>
> HTH
>

You can also take a look in /etc/services to identify ports.



Relevant Pages

  • Re: Stealth ports with Sygate PF
    ... Sorry for the mistake in the subject line. ... > I'm a newbie, ... > Firewall. ... I have set up rules which block ports. ...
    (comp.security.firewalls)
  • Re: recover from failed make build
    ... >port setup is fairly old. ... I'm a newbie. ... My ports came off the 4.8 mini iso I d/l'd some months ago - ... Since I plan on doing ports for some time, how might I keep them current? ...
    (freebsd-questions)
  • Re: Sleath ports with Sygate PF
    ... > I'm a newbie, ... > Firewall. ... I have set up rules which block ports. ...
    (comp.security.firewalls)
  • Re: They can break ZoneAlarm easily !
    ... >Do a search on Google or Yahoo for a free port scanner for your own operating ... This will show the newbie what ports are open. ...
    (comp.security.firewalls)
  • Sleath ports with Sygate PF
    ... I'm a newbie, ... Firewall. ... I have set up rules which block ports. ...
    (comp.security.firewalls)